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the distances of the mobile unit from each of the base stations; and means for 
deriving, from the differences in distance, the location of the mobile unit, 
characterised in that the mobile unit has means for determining the differences in 
timing at the mobile unit of a characteristic feature of a time division frame 
5 structure broadcast synchronously by the control channel of each base station. 

The mobile unit may further comprise means for receiving data from the 
currently serving base station concerning base stations within radio range of the 
mobile unit, the information including the geographical locations of the base 
stations. 

^ o The cellular radio network may be complementary to the mobile unit of the 

second aspect of the invention as defined above. Alternatively, the location 
determination functions may be performed by the network itself. Accordingly, the 
cellular network may com^rnea*^^ 

between ^^.^^mittgd by jhe base stations as measured atjhe jnobile^unit; 

15 means for determining, f rom the tim ingjii fferences, the di fferences in the 
distances of the mobile unit from each of the base stations; and means for 
deriving, from the differences in distance, the location of the mobile unit, being 
characterised in that the base stations have broadcast control channels operat.ng 
with synchronised time division frame structures having a characteristic feature for 

20 detection by the mobile units, and in having means for receiving from the mob.le 
unit an indication of the arrival time at the mobile unit of the characteristic feature 

from each base station. 

According to a further aspect of the invention, there is provided apparatus 
for determining the position of a mobile unit using a cellular radio system having a 
25 plurality of base stations, means for determining the differences in timing between 
the operation of the base stations as measured at the mobile unit; means for 
determining, from the timing differences, the differences in the distances of the 
mobile unit from each of the base stations; and means for deriving, from the 
differences in distance, the .ocation of the mobile unit, characterised in that the 
30 system comprises means for synchronising the time division frame structures of 
control channel broadcast by at least a plurality of the base stations within rad.o 
range of the mobi.e unit, and the mobile unit has means for determ.n.ng the 
differences in timing at the mobile unit of a characteristic feature of the t,me 
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division frame structure broadcast by the control channel of each base station. The 
time difference measuring means, distance difference determining means and 
location deriving means may each form part of the mobile unit or of the fixed 
network. If in the mobile unit, this unit may further comprise means for receiving 
5 data from the currently serving base station concerning base stations within radio 
range of the mobile unit, the information including the geographical locations of the 
base stations. 

In a further aspect, there is provided a position-finding device comprising 
means for determining the geographical location of the device, means for 
10 identifying a predetermined geographical location, and alarm means for signalling to 
a user that the geographical location of the device corresponds to the 
predetermined geographical location or area. 

In existing GSM systems each base station transmits a control channel 
(BCCH) having a TDMA frame structure. This frame structure is made up of 
15 "multiframes" each of 235.38 milliseconds. Each multiframe has a substructure of 
fifty-one frames, each frame having eight bursts. Each burst is made up of three 
"tail" bits, 142 information bits, three more "tail" bits, and a guard period 
equivalent in duration to 8% bits. The frame is thus 156% bits in duration, and 
each bit has a duration of approximately 3.9 microseconds, so a burst has a 
20 duration of 0.577 milliseconds. The frames in each multiframe are conventionally 
numbered 00 to 50, of which five are frequency control frames (FCCH), (00, 10, 
20, 30 and 40); and five are synchronisation frames (SCH); 01, 1 1, 21, 31, 41 . 
The interval between the synchronisation frames is therefore generally 46.15 
msec, (80 bursts), but the interval between frames 41 and 01 has a longer 
25 duration of 50.77 msec (88 bursts) because of the presence of the extra frame 50. 
The synchronisation frames each include a training sequence which is used in th.s 
embodiment of the invention as the characteristic feature. 

In GSM, the use of time division multiple access (TDMA) means that the 
mobile station and the serving base station have to be highly synchronised, For the 
30 mobile unit to decode the identity code BS.C of a base station, it has to bnef.y 
synchronise itself with the base station. Consequently, the mobile unit always has 
an indication of by what fraction of a frame (i.e., how many bits) each of the 
neighbouring base stations differ from the serving base station, as seen by the 
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mobile unit. If the frame cycles of all the base stations were to be absolutely 
synchronised, (i.e. all the base stations simultaneously transmit the same part of 
the frame) the amount the mobile unit would have to shift its frame structure 
(relative to the serving base station) to decode the BSIC of the other base stations 
5 would be purely a function of the difference in path length between the serving 
base station and its neighbours. In existing systems mobile units are synchronised 
to their serving base stations to better than V* bit. 0.923 microseconds, which, at 
the speed of light <3x10 8 mis), corresponds to a resolution of 277m. This 
accuracy can be significantly improved upon for location purposes by using the 
1 0 data present in the equaliser of the mobile unit. 

In GSM practice, the frame structure of each base station is not 
synchronised in the absolute sense, but only in the relative sense that for each 
base station there is some point in the frame structure which is synchronised with 
the external synchronisation signal. Thus the timing of the frame structures of the 
15 base stations differ from each other by an arbitrary but constant amount, referred 
to herein as the "offset". The term "synchronised", as used in this specification, is 
used in this relative sense (i.e. differing by a constant amount), unless the context 

clearly demands otherwise. 

It would be possible to reconfigure the GSM system such that the base 
20 stations are all synchronised in the absolute sense. However, in a preferred 
arrangement, for each base station the respective offset is subtracted from the 
arrival time at the mobile unit of the characteristic feature of the frame to obtain 
the difference between the distance that base station is from the mobile unit and 
the distance the serving base station is from the mobile unit. These calculations 
25 may be performed in the fixed part of the network, but in a preferred arrangement 
data relating to the offset associated with each base station is transmitted from 
the serving base station to the mobile unit, and the timing difference is determined 
by the mobile unit from said offset data and the arrival times of the characteristic 
feature from each base station. Accordingly, another aspect of the invention 
30 provides a ce.lu.ar radio network for use with the mobile units defined above, 
comprising a plurality of base stations operating with control channels 
broadcasting synchronous time division frame structures, means for ident.fy.ng 
which of the base stations are in radio range of a specified mobile unit, and means 
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for transmitting data relating to the location and synchronisation offsets of each 
such base station to the mobile unit. 

The timing differences provide the differences in path lengths between the 
various base stations, however they do not provide an absolute path length. In the 
5 prior art systems described above, the timing of signals from a minimum of three 
base stations is stated to be sufficient to provide a unique position fix (in two 
dimensions). In order to achieve this, it is necessary to know not only the 
difference in arrival times of the signals from the different base stations, but also 
their absolute arrival times relative to some fixed timescale. This requires the 

10 mobile unit to have a clock synchronised with those of the base stations. The base 
stations can be synchronised using the GPS system, but the mobile units cannot 
themselves be synchronised to the GPS system unless they too incorporate GPS 
receivers, thereby re-introducing the complexity sought to be avoided by using the 
cellular radio characteristics. 

1 5 It has been suggested that timing advance be used to determine distance 

from the serving base station. Timing advance is the amount by which a mobile 
unit is instructed by the serving base station to advance its transmissions relative 
to the signals received by the mobile unit, to allow the transmissions from the 
mobile unit to arrive at the base station at its allocated point in the TDMA frame. 

20 The timing advance corresponds to the time taken for radio waves to cover the 
out-and-back distance between the base station and the mobile unit, i.e. twice the 
path length. However, the timing advance is only determined when a mobile unit 
has a call in progress. Furthermore, the timing advance is determined for the 
strongest signal, which is not necessarily the most direct if multipath interference 

25 is present, and its accuracy is also relatively coarse. 

Instead, in one preferred arrangement according to the invention the 
differences in timing between at least four base stations are determined 
(conveniently these are the differences between the currently serving base station 
and each of three neighbouring ones), thereby allowing the determination of the 

30 absolute location of the mobile unit in two dimensions. As will be described below, 
the use of four base stations provides a unique result in two dimensions, without 
the need for an absolute reference in the mobile unit. In another preferred 
arrangement the differences in timing between at least five base stations (the 
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serving base station and four others) are determined, thereby allowing the 
determination of the absolute location of the mobile unit in three dimensions. This 
latter arrangement is to be preferred if the differences in the altitudes of the base 
stations and/or the mobile unit are large in relation to the overall accuracy of the 
5 system. 

Embodiments of the invention may nevertheless use timing advance 
information to supplement the basic method in circumstances where fewer than 
the minimum number of base stations are detected by the mobile unit. Other 
supplementary information may also be used where circumstances require, such as 
10 information relating to the direction of the mobile unit relative to the antenna. If 
one or more of the plurality of base stations in the cellular radio system have a 
very limited range, the method may comprise an additional step wherein if the 
mobile unit is recognised as being within range of one of said limited-range base 
stations the location of the mobile unit is determined to be the location of said 
15 limited-range base station. 

An embodiment of the invention will now be described with reference to 
the drawings in which: 

Figure 1 shows part of a cellular radio system; 

Figure 2 is a schematic illustrating part of the system of Figure 1 in more 
20 detail, and indicating the various parameters used in the calculations carried out in 
the method of the invention; 

Figure 3 illustrates multipath propagation; and 

Figure 4 shows a plot of correlation against time for a training sequence; 
Figure 1 shows a cellular radio system including a mobile unit M, a base 

25 station A, currently serving the mobile unit M, and six neighbouring base stations 
B, C r D, E, F, G, Each base station is shown as having a hexagonal coverage area, 
or "cell", but in practice the cells are more irregular because of topographical 
reasons, and base station siting. Moreover, the propogation characteristics of radio 
waves mean that coverage areas overlap in practice, and the mobile unit can 

30 detect signals from several nearby base stations, albeit less strongly than from the 
currently serving base station A. For the purposes of this illustration, it will be 
assumed that the mobile unit M can detect the BCCH (control channel) of base 
stations A, B, C, D, and E at least. 
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The coverage area of base station A is shown subdivided into three 1 20 
degree sectors A1, A2, A3, each of which is served by a respective sector 
antenna at base station A, having its own channel allocation. 

Also within the coverage of base station A there is a microceli H. This is a 
5 cell having its own low power (and therefore short range) base station, provided to 
serve a limited area having a high demand for call traffic, and/or which is poorly 
served by the main cellular structure, for example because of tall buildings. 

In Figure 2, there is shown the mobile unit M and five base stations A, B, 
C, D, E are represented, together with their co-ordinates in three dimensions (X a , 
10 Y a , Z a ; X b , Y b , Z b ; X CI Y c , Z c ; X d , Y d , Z d ; X e , Y e , Z e ), and the distance of the 
mobile unit from each base station d 3t d b , d Ct d dt d e , respectively. The unknown co- 
ordinates of the mobile unit M are represnted as (x,y,z). 

For illustrative purposes the embodiment will be described as operating 
according to the GSM standard, using GPS data, but this is not intended to be 
15 limitative. In GSM, each base station, (for example, the base station A) holds 
information relating to itself and six nearby base stations B, C, D, E, F, G. For the 
purpose of the present invention only four nearby base stations B, C, D, E of the 
six are used, the four in question generally being those providing the strongest 
signal at the mobile unit M. The base station transmits the data to the mobile unit 
20 M on its BCCH (Broadcast Control Channel). This data includes the radio frequency 
of each base station's BCCH, allowing the mobile unit to periodically sample the 
signal quality of each BCCH, and allow handovers to take place based on the 
results of this sampling. 

In this embodiment of the invention information additional to that required 
25 by the GSM system is transmitted to the mobile unit, either over the BCCH or in a 
separate data message. This information includes the location of each of the base 
stations A, B, C, D, E and their relative frame offsets (as defined above). This 
offset indicates how the timing of the TDMA frame structure relates to a reference 
timeframe, which may be the time frame of the serving base station A, or of 
30 universal reference. 

The radio link between the mobile unit M and the base station A is a time 
division multiple access (TDMA) system, in which different mobile units 
communicate with the base station A on the same radio frequency, at different 
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times. At times when the base station A is transmitting to other mobile units (not 
shown), the mobile unit M monitors the BCCH frequencies of the nearby base 
stations B, C, D, E r (F ( G) as identified to it by the base station A. 

Each base station periodically transmits a training sequence (SCH). 
5 Specifically, in GSM, the SCH is transmitted five times in each multiframe of the 
BCCH, in TDMA frames 01, 11, 21, 31, and 41. This training sequence 
corresponds to a sequence stored in the mobile unit, which is arranged to identify 
correlations between the stored sequence and the BCCH transmissions, thereby 
allowing the mobile unit and base station to be synchronised and an estimate of 
10 the signal quality to be made. 

Figure 3 illustrates a phenomenon known as "multipathing". In a typical 
environment radio signals may propagate between a base station A and a mobile 
unit M by a number of different paths, as a result of reflections and refraction 
caused by buildings and other obstructions. These paths are, in general, of 
15 different length; for example a direct path 41 is shorter than a path 42 reflected by 
a building 40. The correlation of the training sequence may therefore identify more 
than one correlation, occurring at different times. This is illustrated in Figure 4, in 
which there is a first correlation 31 at time t 31 and a second, stronger correlation 
32 at time t 32 . This situation can occur when the direct path 41 is subject to 
20 attenuation, for example by foliage, and the direct path is not attenuated. In the 
example of Figure 3, a strong indirect signal 42 will occur if the building 40 is a 
good reflector of radio waves. 

For the purpose of assessing suitability for handover, and synchronising 
with a base station, the strongest correlation 32 would be used, even though this 
25 corresponds to a longer path 42 than the earlier, weaker correlation 31. However, 
for the purpose of position identification, the straight line distance from the base 
station is required and so the time of arrival of the first correlation 31 is used, and 
not the strongest correlation 32. The first correlation may itself relate to a 
reflected signal, if there is no direct line of sight path, it will still be the closest to 
30 the time a direct signal would have arrived. 

The mobile unit M identifies from the respective BCCHs the times of 
arrival T B , T Cf T 0 , T E of the first instance of the training sequence from each 
nearby base station B, C, D, E and compares them with the time of arrival T A of 



WO 96/35306 



PCT/GB96/01039 



11 



the training sequence from the serving base station A, to identify time intervals 
T, = T B - T A ; T 2 = T c - T A ; T 3 = T D - T A ; T 4 = T E - T A . These intervals can be 
measured accurately by counting the number of digital bits which occur between 
the arrivals of these signals. This gives an accuracy of the order of 1 microsecond. 
5 The intervals will be different, as a result of three factors: difference in path 
length; different relative frame offsets; and transmission in different frames. It is 
first necessary to eliminate the latter two factors in order to determine the 

differences in path length. 

Each base station transmits the same synchronisation training sequence 

10 five times in every control channel muitiframe, that is at a time interval t F . Since 
the mobile unit monitors control channel multiframes as a method of pre- 
synchronisation it will not always identify correlations from all the base stations A, 
B, C, D, E on the same part of the muitiframe cycle structure. However, the time 
difference t F between synchronisation bursts (SCH) within the control channel 

.15 muitiframe is large enough for a radio wave to propagate several thousand 
kilometres (approximately 13,800km), therefore multiples of the frame length can 

easily be eliminated. 

The different offsets of SCH within the mutiframe can be allowed for by 
measuring, at each base station, the time of transmission of the control channel 
20 mutiframe sequence relative to a universal reference such as the GPS 
synchronisation signal. The serving base station A transmits over the BCCH a 
signal representing the offsets of the neighbouring base stations (relative either to 
the universal reference or, preferably, relative to its own transmissions), thus 
allowing these offsets to be compensated for. 
25 In this way a time difference t, - T, - (n* + Q B ) can be derived, where 

Q B is the offset of base station B relative to base station A, t F is the frame length, 
and n, is an integer, selected such that the magnitude of t, is a minimum. GPS 
provides time signals accurate to 50 nanoseconds, and this may be used at the 
base stations to provide the timing information required to determine the offset 
30 values. The frame length is a constant of the system. The accuracy of the value of 
t n is therefore determined largely by the accuracy with which T, is measured 
(typically of the order of 1 microsecond, as already discussed). 
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Note that the value of t, may be negative, if the base station B is closer 
to the mobile unit than the serving base station A, as may occur if the base station 
A has a stronger signal at the mobile unit than base station B, despite its greater 
distance, or if no traffic channel is available on base station B. As stated above, 
5 the interval between SCH frames is either 88 bursts or 80, and thus there are two 
possible values for t F (46.15 or 50.77milliseconds). The position within the 
multiframe can easily be determined by the mobile unit, and the appropriate value 
of t F selected. 

Values t 2 = T 2 - <n 2 t F + Q c ), t 3 = T 3 - <n 3 t F + Q D >, and U = T 4 - <n 4 t F 

10 + Qg) ca n be derived in a similar way. 

The values t„ t 2 . t 3 , and t 4 . when multiplied by c, the speed of propagation 
of radio waves, produce values d 1( d 2 , d 3 , and d 4 which are the differences 
between path length d a and the path lengths d b , d c , d d , and d e respectively (see 
Figure 1 ) Specifically, d, = d a - d b ; d 2 = d a - d c ; d 3 = d a - d d ; and d 4 = d a - d e . T 
15 It will be appreciated that the mobile unit has no means of detecting the 

GPS synchronisation pulse itself, as it is not a GPS receiver. The arrival times of 
the training sequences can therefore on.y be measured relative to each other, not 
against an absolute timescale. and therefore the time t a it takes the training s.gnal 
to reach the mobile unit M from the base station A is unknown. Thus the distance 
20 d of the mobile unit M from the base station A (which is simply the distance rad.o 
waves propagate in this unknown time t 8 ) cannot be derived directly (and sim.iarly 
for base stations B, C, D, E). The relative arrival times indicate only that base 
station B, for example, is further from mobile unit M than base station A by a 
distance =d a - d b . 

25 To enable the mobile unit to calculate its position, it has to know the 

iocation of the base station sites in its area. This information could be passed to 
the mobi.e unit by either using a "Cell Broadcast" message or a Short Message 
Service (SMS) as provided on some cellular systems; both are capable of message 
.engths up to an ample 160 characters. Information sent to the mobile un,t from a 

30 base station would include; the co-ordinates of that base station, and informat.on 
about the neighbouring base stations such as their locations and their offsets (the 
timing of the training sequence re.ative to a universal standard, or re.ative to the 
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serving base station), a flag to indicate if a base station was precisely 
synchronised, time, and date. 

The serving base station A transmits not only its own details, but also 
details of its neighbours B, C, D, E. The mobile unit M can then get all the 
5 information it needs without having to handover to the other base stations. The 
rate at which such information is broadcast would have to dimensioned to allow 
the mobile unit to calculate its position quickly, this would be especially important 
for a tracking service to make use of the information. The "Short Message 
Service" (SMS) available in the GSM system could be used when a customer 
10 initially requests the service, to provide authentication and prevent unauthorised 
use. Once a customer has been validated as a user, SMS could then pass a 
ciphering key to the mobile unit to allow it to decode the cell broadcast message. 
This system would be relatively secure as the messages passing over the radio 
interface are already protected by GSM's ciphering system. 
15 SMS could be used instead of the Cell Broadcast system to pass all the 

base station site location information to a mobile unit and allow it to calculate its 
position. This method would be less prone to fraud than a Cell Broadcast, as SMS 
is a point to point system. However the large number of messages required to 
reach a potentially large number of mobile units could prove to be too high an 
20 overhead on the network. Another problem with an SMS based system ., 
identifying which base station sites' details to send to a particular mobile unit 
without first knowing where the mobile unit is. Hence a mobile unit's serving base 
station ID would have to be known by the network before the information 
concerning its neighbouring base stations can be transmitted over SMS. 
25 A tracking service would require the use of SMS originating from the 

mobile unit if the location were to be passed to a remote centre, for example the 
emergency services or a fleet control centre. Position information transmitted from 
the mobi.e unit could include a time stamp to allow for delays in the SMS network 
and the motion of the mobile unit. 
30 The determination of position from timing differences will now be 

described in detail. It will be seen from the following that five base stations is the 
minimum necessary to ensure an unambiguous result in three dimensions rf the 



WO 96/35306 



PCT/GB96/01039 



14 



absolute distance from none of them is known. If only two dimensions are 

considered, four base stations are sufficient. 

Figure 2 shows the information available to the mobile unit. (A star 
indicates that a value is unknown). The values x. Y and z represent the mobile 
5 unit's position in three dimensions, which are to be calculated. The values X 8 , etc 
indicate the known positions of the base stations, as transmitted to the mobi.e unit 
M over the BCCH. 
Consider five base stations: 

Base station A at (X„y*Z.>: distance to mobile unit is d, 
! o Base station B at (X* YM distance to mobile unit is d b 

Base station C at (X^^Y. distance to mobile unit is d c 
Base station D at {X d ,Y d .Z d Y. distance to mobile unit is d d 
Base station E at (X v Y e ,Z e Y. distance to mobile unit is d e 



15 



The mobile unit scans the base stations and measures the timing 
differences t„ t 2 , t* U between the serving base station and each surrounding 
base station, as described above. These timing differences are directly 
proportional to the path length differences: d, - f,C where c is the speed of 
propagation of radio waves, approximate^ 300 metres per microsecond. Hence 
20 the mobile unit can easily calculate d, to d 4 where; 
d, = d a - d b 
d 2 = d a -d c 
d 3 = d 3 - d d 
d 4 = d a • d e 



25 



The following five equations represent the mobile unit's location, based on 



the equation for a sphere; 






(x-Xf + (Y-YJ* + fr- 


■zf 


= d. 2 


(x-Xf + (V-Yf + fr- 


■zf 


= d b 2 


30 (x - xf + (Y - Yf + tz 


■zf 


= d? 


(x - Xf + (Y ■ Yf + ft 


-zf 


= d/ 


(x - xf + (y - yf + (z 


■zf 


= d< 2 



- Equation [1] 

- Equation 12] 

- Equation [3] 

- Equation [4] 
• Equation [5] 
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Now, d, - d a - d b . Rewritten as d,-d a = -d b , and squaring both sides gives; 
d, 2 - 2d,d a + d a 2 = d b 2 - Equation 161 

* 

Substitute [11 and 12] into 16]; 
5 d, 2 - 2 d,d a + (x - XJ 2 + (y - Yf + (z - ZJ 2 = 

(x -Xf + (v ■ + (z ■ ZJ 2 

Rearranging to put known variables on the right hand side gives; 

- d,d. • x(X a -X,) - y(Y a -YJ -z(Z a - ZJ = k,/2 - Equation (7a) 

10 

Where k, consists of the known values; 

kl = . dl 2 -X 2 -Y 2 -Z 2 + X 2 + Y b 2 + Z b 2 

For simplicity we define; 

Y ab =Y a -Y b , 
and: Z B t, ~ Z a - Z b . 

Equation 7a becomes; 
20 -d,d a -xX ab -yY ab -zZ ab = k 1 /2 - Equation [7] 

Repeating this process with equations [31 to 15] gives; 
Base stations A and C 

- 4*. - xX ac ■ YY ae - zZ ac = Ar/2 - Equation 18] 
25 Where; k 2 = - d 2 2 ■ X a 2 - v. 2 - Z 2 + X 2 + Y 2 + Z 2 

Base stations A and D 

- djd, - xX ad -yY ad - zZ ad = kj/2 
Where k 3 = - d 3 2 - X 2 ■ Y 2 - Z 2 + X d 2 + Y 2 + Z 2 

30 

Base stations A and E 

■d 4 d a -xX ae - yY ae -zZ ae = k</2 
Where k 4 = - d 4 2 - X 2 ■ Y 2 -Z 2 + X e 2 + /. 2 + Z. 2 



- Equation 19] 



- Equation [10] 
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Rearranging equation [7] in terms of d 8 ; 

d a = j-fe + *X+ + yY+ + iZ„] - Equation [1 1] 

5 Substitution of [1 1] into /»/ leads to; ■ Equation [12] 



Substitution of /"7 // into /97 leads to; - Equation [ 13] 

4x+*> - x ^) + y( Y + d > ~ MM*-4 - ^.)-( rf '* > 2 rf3 *') = 0 

10 

Substitution of 11 11 into [10] leads to; - Equation [14] 

For two-dimensional positioning, all z co-ordinates can be ignored. This 
15 will induce an error due to the fact that the four base stations and the mobile unit 
are unlikely to all be in exactly the same plane. In particular, base stations are, 
whenever possible, mounted on hills or tall structures (buildings or purpose-built 
masts) to improve their range, whilst mobile units generally to operate near ground 
level. However, when the differences in altitude are small (of the order of the 
20 accuracy of the system as a whole) the error will be insignificant. 

Subject to these limitations, we can solve in two dimensions by ignoring 
the z co-ordinates from the equations and from the calculation of the terms k 2 , 
etc. Equation /72/then becomes; 

- *«*) + ^ - w) - {^ 3k ) = 0 

25 

and equation [13] becomes; 



i =0 



WO 96/35306 



PCT/GB96/01039 



17 



Both of these equations represent straight lines in the x y plane. The point 
where these two lines cross represents the mobile unit's position. This point can 
be found by substituting one equation into the other. 
5 In three dimensions equations [12], [13] and [14] each represent planes in 

space. The intersection of two planes represents a straight line, hence all three 
equations are needed to find the mobile unit location (x, y, z) uniquely. 



10 



The general equation of a plane is; Ax ■+ By + Cz + D = 0 

For equation [12]; A = X 3b d 2 -X ac d,; B = Y ab d 2 - Y ac d, : C = Z ab d 2 - X ac d,; and 

D _ ^k 2 -d z k, 

To solve the intersection of the three planes, the equations need to be put 
into Hessian form. For equation [12]; 



A 1 : B 1 

n{= T7WT? p a 1 + b"-+C- 



The plane can now be simply represented as a vector; 
nx = -p, where: n - «,/ + nJ + n y k 



20 



Once all the planes are represented in this form, the intersection can easily 
be calculated. 

The calculation using timing differences described above can be carried 
out in the mobile unit with very little network overhead. This system will be able 

25 to support a large number of users as it does not necessitate calls to be made, 
apart from initial authenticating SMS messages. It should be noted that much of 
the software required to process time difference information already exists in 
mobile units. However, the system does require the addition of special software in 
the mobile unit to perform the necessary calculations. Improvements in the signal 

30 processing, for example by using data retreived from the mobile unit's equaliser. 
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may also be used to resolve to rather better than the % bit (0.923 microseconds, 
equivalent to 277 metres) needed purely for bit synchronisation. The data present 
in the equaliser of the mobile unit should allow resolution to 4% of one bit, 
equivalent to approximately 50 metres. 
5 Factors such as multipath, shadowing and fading may cause the accuracy 

of the location calculation to vary with time. Therefore, it is desirable to use time 
averaging in the location calculation algorithm to improve the accuracy. 

There are a number of possible services that could be provided as adjuncts 
to a positioning service. Large amounts of money are defrauded from the cellular 
10 radio industry by illegal practices such as, "cloning", which is the fraudulent 
practice of giving one mobile unit, usually a stolen one, the electronic identity of 
another, legitimate, unit. Calls made on the "clone" are then charged by the 
cellular network to the legitimate user. The existence of as clone is usually only 
detected when the legitimate user gets his bill, or if both the clone and legitimate 
15 user attempt to access the system simultaneously. Providing a built-in location 
service would mean that a stolen or otherwise suspicious mobile unit could be 
quickly located and recovered. 

Similarly, a mobile unit built into a vehicle would enable the vehicle to be 
located, if it should be stolen. For such services to be effective the location 
20 software would have to be enabled remotely, either by the official owners or by 
the police. 

Accurate positional information would prove invaluable to the emergency 
services in other ways. The service would allow help to be directed quickly and 
efficiently to a person in distress making an emergency call from a mobile unit so 
25 fitted. It may be desirable that the customer has control as to whether the 
service is activated, to avoid any customer perception that they are under 
surveillance by the authorities. 

The emergency services, and other organisations with large field forces 
such as utility companies, may themselves make use of the cellular network, in 
30 place of a private mobile network (PMR), and the tracking service would allow a 
controller to monitor the distribution of his field force personnel. 

A tracking service can also be used to monitor the progress of valuable or 
sensitive cargoes. The system could be arranged to warn of deviations from a 
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preset route. Another application could be an alarm service to alert weary train 
travellers when they reach their home station. 

As stated above, a signal needs to be received from four base stations in 
order to provide a position fix in two dimensions, (five base stations for three 
5 dimensions). There are some circumstances when fewer base stations are within 
range. In these circumstances various supplementary methods may be used to 
obtain a position fix. 

In one possible arrangement the mobile unit may be forced to hand over 
from the currently serving base station A to a neighbouring base station, for 
10 example Base Station B (see Figure 1). This base station will have a different 
"neighbour list" from that of Base Station A (although the lists will have several 
base stations in common). Between the two neighbour lists there may be sufficient 
base stations in range of the mobile unit for a fix to be obtained. The base stations 
in each neighbour list will each have their offsets determined according to the 
1 5 respective base station A or B, but this can be allowed for because the offset of 
base station B relative to base station A is known, since they are in each other's 
neighbour lists. 

Other supplementary methods may also be employed. For example the 
absolute distance to the currently serving base station may be derived from the 
20 timing advance; that is, the amount by which the mobile unit's transmissions need 
to be advanced relative to the signals received from the base station such that 
they arrive at the base station in the correct time slot. This is only accurate to 
about 600 metres, and the timing advance is normally only calculated when a call 
is in progress, not when the mobile unit is on standby. 
25 As shown in Figure 1 for base station A, one (or more) cells may be 

sectored, that is, the base station has several antennas each serving a limited 
azimuthal range (typically 60 or 120 degrees). Identification of the sector A1 
serving the mobile unit may be used to identify which solution of the equations is 
correct. However, this method is not practical where the base station has an 
30 omnidirectional antenna, nor where two or more possible results alt occur in the 
same sector A1. In particular, since the sectoring is azimuthal, it will not resolve an 
ambiguity in the z coordinate (altitude). Furthermore, there is a possibility that a 
side or rear lobe of the sector antenna might be detected. 
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A further possibility is to identify, from the possible solutions, the one 
which is Cosest to the previous.y identified location of the mobile unit as being the 
one most likely to be the new one. This can be reasonably reliable if the mob.le 
unit is travelling slowly in comparison to the time between location updates. 
5 Figure 1 atso shows a microcel. H. Microce.ls are very small cells served 

bv , 0W power base stations often mounted well below roof-top level or even 
indoors to provide additional coverage in locations of very high demand, .t is very 
, ike .y that a GPS receiver would not operate in such a base station, as it would not 
be re.iab.y visible to the satellites, as well as being cost prohibitive. Moreover. 
10 because the antenna of the microcell H is ft* to be at low ,eve. or indoors ,t . 
probable that a mobile unit in range of a microce.l base station is not in rad.o range 

than that serving the microce.l H. However, because the microce.l H only covers a 
very sma.. area, the information that the mobi.e unit M is within range of the 

accuracy as the basic system. 

A„ of these supplementary processes toe .he potentia, I. sterna* 

process, bu, may be used. MM**, or in combination, to main,a,n the sen, 
20 when fewer base stations than the minimum feu, (five, are range o. 

mobile unit. * 
The GPS system has systematic errors in it. resuhing in an accuracy of 
about ,00 metres. Fo, some appiications. such as suryeying. greater accuracy ,s 
quired and a system known as "differentia, GPS" has been day , oped ,0 

,h,s This inyoives piacing a GPS -eceiyer a, a preciseiy Known 

25 overcome this. mis invu.vco H 

• rt thp prror in its position as measured by GP5, 
"beacon" position and measunng the error in its po 

Which erro yaiue is then transmitted to oth n. The position locanon system 

I, I present invention reouir gnifican, number 0, ceiiular base stafons to 

e GPS receivers ,*.ed. to provide accurate -chronising s,gna,s. S,ce ,h 
30 positions o, the ce„u,a, base stations are fixed, they can 

means with great accuracy, aiicwing them to be used to offer such a d,«eren„a, 

GPS beacon service. 
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CLAIMS 

1. A method of determining the location of a mobile unit of a cellular radio 
system having a plurality of base stations, comprising the steps of determining the 
differences in timing between the base stations' transmissions as measured at the 
5 mobile unit, determining from the timing differences the differences in the distance 
of the mobile unit from each of the base stations, and deriving the location of the 
mobile unit from the differences in distance so determined, characterised in that 
the time division frame structures of the control channels of at least some of the 
base stations within radio range of the mobile unit are synchronised, and the 
10 mobile unit determines the differences in timing at the mobile unit of a 

characteristic feature of the time division frame structure broadcast by the control 

channel of each base station. 

2. A method according to claim 1 , in which the differences in timing between 
at least four base stations are determined, thereby allowing the determination of 
1 5 the absolute location of the mobile unit in two dimensions. 

3 A method according to claim 1 , in which the differences in timing between 
at least five base stations are determined, thereby allowing the determination of 
the absolute location of the mobile unit in three dimensions. 

4 A method according to claim 2 or claim 3, wherein if fewer than the 
20 required number of base stations are detected by the mobile unit, the timing 

advance required for communication with the serving base station is used to der.ve 
the distance between the mobile unit and the serving base station. 



5 A method according to claim 2, 3, or 4, wherein if fewer than the required 
25 number of base stations are detected by the mobile unit, information relating to the 
direction of the mobi.e unit relative to one or more of the base stations ,, 
additionally used to identify the correct location. 
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6. A method according to any preceding claim, in which the base stations' 
time division frame structures' timings are offset relative to each other, and in 
which for each base station the respective offset is subtracted from the arrival 
time of the characteristic feature of the frame to obtain the difference between the 

5 distance that base station is from the mobile unit and the distance the serving base 
station is from the mobile unit. 

7. A method according to claim 6, wherein data relating to the offset 
associated with each base station is transmitted from the serving base station to 
the mobile unit, and the distance calculation is determined by the mobile unit from 

10 said offset data and the arrival times of the characteristic feature. 

8. A method according to any preceding claim, in which the characteristic 
feature used is a training signal transmitted by each base station, and the mobile 
unit identifies correlations of the signals received from each base station with a 
reference training signal stored by the mobile unit. 

15 9. A method according to claim 8, in which the cellular radio system operates 
according to the GSM standard, and the training signal is the synchronisation burst 
(SCH) transmitted according to that standard. 

10. A method according to claim 8 or claim 9, in which the first identified 
correlation of the reference signal, corresponding to the most direct signal path, is 

20 used for distance calculation. 

11. A method according to any preceding claim, in which the derived location 
is time averaged. 

12. A method according to any preceding claim, wherein one or more of the 
plurality of base stations in the cellular radio system have a very short range, and 

25 comprising the additional step wherein if the mobile unit is recognised as being 
within range of one of said limited-range base stations the location of the mobile 
unit is determined to be the location of said limited-range base station. 

13. A method according to any preceding claim, wherein the derived location 
is communicated via the cellular radio network to a remote user. 
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14. A method according to any preceding claim, wherein, if the derived 
location corresponds to a predetermined location, an alarm signal is transmitted. 

1 5. Mobile unit for use with a cellular radio system, the mobile unit comprising 
apparatus for determining the position of the mobile unit; the apparatus comprising 

5 means for detecting timing differences of signals received from different radio base 
stations, and means for determining, from the timing differences, the differences in 
the distances of the mobile unit from each of the base stations; and means for 
deriving, from the differences in distance, the location of the mobile unit, 
characterised in that the mobile unit has means for determining the differences in 

10 timing at the mobile unit of a characteristic feature of a time division frame 
structure broadcast synchronously by the control channel of each base station. 

16. Mobile unit according to claim 15 comprising means for detecting the 
differences in timing at the mobile unit of at least four base stations, and means 
for thereby determining the position of the mobile unit in two dimensions. 

15 17. Mobile unit according to claim 15 comprising means for detecting the 
differences in timing at the mobile unit of at least five base stations, and means for 
thereby determining the position of the mobile unit in three dimensions. 

18. Mobile unit according to claim 16 or 17, having means for deriving the 
distance between the mobile unit and the serving base station from the timing 

20 advance required for communication with the serving base station if fewer than 
the required number of base stations are detected by the mobile unit. 

19. Mobile unit according to 16, 17 or 18, having means for determining the 
direction of the mobile unit relative to one or more of the base stations if fewer 
than the required number of base stations are detected by the mobile unit. 



25 



20. Mobile unit according to claim 15, 16, 17, 18 or 19 further comprising 
means for receiving data concerning the location of the base stations. 
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21. Mobile unit according to claim 20 further comprising means for receiving 
data concerning the amount by which the base stations' frame timings are offset 
relative to the currently serving base station, and means for subtracting, for each 
base station, the offset from the arrival time of the frame to obtain the difference 
5 between the distance between that base station and the mobile unit, and the 
distance between the serving base station and the mobile unit. 



22. Mobile unit according to any of claims 15 to 21, arranged to operate 
according to the GSM standard, and wherein the characteristic feature is the 
10 synchronisation burst (SCH) transmitted according to that standard. 



23. Mobile unit according to any of claims 1 5 to 22, further comprising means 
for identifying the base stations within radio range of the mobile unit. 



1 5 24. Mobile unit according to any of claims 1 5 to 23, further comprising means 
for identifying a predetermined geographical location, and alarm means for 
signalling to a user that the geographical location of the device corresponds to the 
predetermined location. 



20 25. A cellular radio network for use with the mobile unit of any of claims 21, 
22, 23 or 24, comprising a plurality of base stations operating with control 
channels broadcasting synchronous time division frame structures, means for 
identifying which of the base stations are in radio range of a specified mobile unit, 
and means for transmitting data relating to the location and synchronisation offset 

25 of each such base station to the mobile unit. 
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26. A cellular radio network comprising a plurality of base stations operating 
with control channels broadcasting synchronous time division frame structures, 
means for identifying which of the base stations are in radio range of a specified 
mobile unit, means for identifying the difference in timing between signals 

5 transmitted by the base stations as measured at the mobile unit; means for 
determining, from the timing differences, the differences in the distances of the 
mobile unit from each of the base stations; and means for deriving, from the 
differences in distance, the location of the mobile unit, characterised in that the 
base stations have broadcast control channels operating with synchronised time 
10 division frame structures having a characteristic feature for detection by the mobile 
units, and in having means for receiving from the mobile unit an indication of the 
arrival time at the mobile unit of the characteristic feature transmitted from each 
base station. 

27. Cellular radio network according to claim 25 or 26, arranged to operate 
15 according to the GSM standard, and wherein the characteristic feature is the 

synchronisation burst (SCH) transmitted according to that standard. 

28. Cellular radio network according to claim 25, 26 or 27, comprising means 
for detecting the differences in timing at the mobile unit of at least four base 
stations, and means for thereby determining the position of the mobile unit in two 

20 dimensions. 

29. Cellular radio network according to claim 25, 26 or 27, comprising means 
for detecting the differences in timing at the mobile unit of at least five base 
stations, and means for thereby determining the position of the mobile unit in three 
dimensions. 

25 30. Cellular radio network according to claim 27, 28, or 29, having means for 
deriving the distance of the mobile unit from the serving base station from the 
timing advance required for communication with the serving base station, if fewer 
than the required number of base stations are detected by the mobile unit. 
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31. Cellular radio network according to claim 27, 28, 29 or 30, having means 
for determining the direction of the mobile unit relative to one or more of the base 
stations if fewer than the required number of base stations are detected by the 
mobile unit. 

5 32. Cellular radio system according to any of claims 26 to 31, in which the 
base stations' frame timings are offset relative to each other, and further 
comprising means for subtracting the respective offset from the arrival time of the 
characteristic feature of the frame at the mobile unit to obtain the difference 
between the distance that base station is from the mobile unit and the distance the 

10 serving base station is from the mobile unit. 

33. Apparatus for determining the position of a mobile unit using a cellular 
radio system having a plurality of base stations, comprising means for determining 
the differences in timing of the operation of the base stations as measured at the 
mobile unit; means for determining, from the timing differences, the differences in 

15 the distances of the mobile unit from each of the base stations; and means for 
deriving, from the differences in distance, the location of the mobile unit, 
characterised in that the system comprises means for synchronising the time 
division frame structures of control channels broadcast by at least a plurality of the 
base stations within radio range of the mobile unit, and the mobile unit has means 

20 for determining the differences in timing at the mobile unit of a characteristic 
feature of the time division frame structure broadcast by the control channel of 
each base station. 

34. Apparatus according to claim 33, wherein the time difference measuring 
means, distance difference determining means and location deriving means form 

25 part of the mobile unit. 

35. Apparatus according to claim 34, further comprising means for identifying 
the base stations within radio range of the mobile unit, and means for transmitting 
data to the mobile unit relating to the geographical locations of said base stations. 
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36. Apparatus according to claim 33, 34, or 35 further comprising means for 
determining and compensating for offsets in synchronisation between the base 
stations' transmissions. 

37. Apparatus according to any of claims 33 to 36, arranged to operate 
5 according to the GSM standard, and wherein the characteristic feature is the 

synchronisation burst (SCH) transmitted according to that standard. 

38. Apparatus according to any of claims 33, 34, 35, 36 or 37 comprising 
means for detecting the differences in timing at the mobile unit of at least four 
base stations, and means for thereby determining the position of the mobile unit in 

10 two dimensions. 

39. Apparatus according to any of claims 33, 34, 35, 36, 37 or 38 comprising 
means for detecting the differences in timing at the mobile unit of at least five 
base stations, and means for thereby determining the position of the mobile unit in 
3 dimensions. 

15 40. Apparatus according to claim 38 or 39, having means for deriving the 
distance of the mobile unit from the serving base station from the timing advance 
required for communication with the serving base station, if fewer than the 
required number of base stations are detected by the mobile unit. 

41 . Apparatus according to claim 38, 39 or 40, having means for determining 
20 the direction of the mobile unit relative to one or more of the base stations, if 

fewer than the required number of base stations are detected by the mobile unit. 

42. Position-finding device comprising means for determining the geographical 
location of the device, means for identifying a predetermined geographical location, 
and alarm means for signalling to a user that the geographical location of the 

25 device corresponds to the predetermined location. 

43. Method of determining location of a cellular telephone, substantially as 
decribed with reference to the drawings. 

44. Apparatus for determining the location of a cellular telephone, substantially 
as decribed with reference to the drawings. 
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